[SOLVED] Zimbra - Samba issue

[Paulatia]

Hi everybody,

I'm trying to get Zimbra in connection with LDAP and Samba working. However, whatever I try, the log.smbd file always shows me the following error.

lib/smbldap_util.c:233(add_new_domain_info)
add_new_domain_info: failed to add domain dn= sambaDomainName=NAME,dc=part1,dc=part2,dc=de with: Invalid DN syntax
invalid DN

Does anybody know what might be causing this? I guess the "dn= " should have an entry, instead of followed immediately by the "sambaDomainName="?

Thanks already!

[alexebner]

I think you have used the HOW-TO for zimbra5 on a zimbra6

[Paulatia]

Yes, you were right. I followed now these intructions
UNIX and Windows Accounts in Zimbra LDAP and Zimbra Admin UI 6.0 - Zimbra :: Wiki

Now I got another problem. The smbd.log file shows me

[2009/12/03 16:10:23, 2] lib/smbldap.c:1052(smbldap_connect_system)
failed to bind to server ldap://...../ with dn="uid=zmposixroot,cn=appaccts,cn=zimbra" Error: Invalid credentials
(unknown)

I added both users zmposix and zmposixroot. When I try

ldapsearch -D uid=zmposix,cn=appaccts,cn=zimbra -W -x

with the zmposix password, everything works fine. But if I try

ldapsearch -D uid=zmposixroot,cn=appaccts,cn=zimbra -W -x

with the zmposixroot password, I get

ldap_bind: Invalid credentials (49)

I tried to change the password for zmposixroot manually by using

ldappasswd -x -S zmposixroot

However, this gives me

Result: Strong(er) authentication required (8)
Additional info: only authenticated users may change passwords

Any idea whats going on here?

[ArcaneMagus]

Try taking a look at ldappasswd(1): change password of LDAP entry - Linux man page, you need to specify the same options that you do for all other ldap commands (Ie. bindDN, password and the like).

[alexebner]

i have taken this for admindn and rootbindn
ldap admin dn = "cn=config"

dont forget to
smbpasswd -w<pass>

and between the -w and the pass no space

[ArcaneMagus]

Using -w is generally bad practice as your password is then stored in the history file. Try using -W which will prompt for the password, or using a password file that has proper security permissions.

[Paulatia]

Well, we managed to solve the problem with the zmposixroot-account which was generated with faulty properties. So now we can search and connect with the zmposixroot-credentials.

The problem remains: the smb-log shows

[2009/12/10 14:33:17,  3] lib/smbldap.c:1067(smbldap_connect_system)
  ldap_connect_system: successful connection to the LDAP server
[2009/12/10 14:33:17,  3] lib/smbldap_util.c:302(smbldap_search_domain_info)
  smbldap_search_domain_info: Got no domain info entries for domain
[2009/12/10 14:33:17,  3] lib/smbldap_util.c:163(add_new_domain_info)
  add_new_domain_info: Adding new domain
[2009/12/10 14:33:17,  1] lib/smbldap_util.c:233(add_new_domain_info)
  add_new_domain_info: failed to add domain dn= sambaDomainName=mydomainname,dc=part1,dc=part2,dc=part3 with: Invalid DN syntax
        invalid DN
[2009/12/10 14:33:17,  0] lib/smbldap_util.c:310(smbldap_search_domain_info)
  smbldap_search_domain_info: Adding domain info for VWL4 failed with NT_STATUS_UNSUCCESSFUL

and we're back to post 1

[Paulatia]

Ok, this problem is solved, we had a problem with the samba.schema/ldif....

[copantl]

I got the same problem, i got bad credentials, how do you solved?
please explain.
thanks.

[todd_dsm]

Originally Posted by Paulatia

Ok, this problem is solved, we had a problem with the samba.schema/ldif....

I'm having the same problem. I've re-created my samba.ldif file over and over with no luck. What was the fix for this? Could you share the particulars?

TT